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MERIT FACTORS OF POLYNOMIALS DERIVED 
FROM DIFFERENCE SETS 

CHRISTIAN GUNTHER AND KAI-UWE SCHMIDT 

Abstract. The problem of constructing polynomials with all coeffi¬ 
cients 1 or —1 and large merit factor (equivalently with small norm 
on the unit circle) arises naturally in complex analysis, condensed matter 
physics, and digital communications engineering. Most known construc¬ 
tions arise (sometimes in a subtle way) from difference sets, in particular 
from Raley and Singer difference sets. We consider the asymptotic merit 
factor of polynomials constructed from other difference sets, providing 
the first essentially new examples since 1991. In particular we prove a 
general theorem on the asymptotic merit factor of polynomials arising 
from cyclotomy, which includes results on Hall and Raley difference sets 
as special cases. In addition, we establish the asymptotic merit fac¬ 
tor of polynomials derived from Cordon-Mills-Welch difference sets and 
Sidelnikov almost difference sets, proving two recent conjectures. 


1. Introduction 


The problem of constructing polynomials having all coefficients in the set 
{ — 1,1} (frequently called Littlewood polynomials) with small norm on 
the complex unit circle arises naturally in complex analysis 
condensed matter physics [3], and the design of sequences for communica¬ 
tions devices m, m- 

Recall that, for 1 < a < oo, the L°‘ norm on the unit circle of a polynomial 
/ G Cfz] is 

1 /*27r \ 

The norm has received particular attention because it is easier to calculate 
than most other L" norms. Specifically, the norm of / G C[^] is exactly 
the sum of the squared magnitudes of the coefficients of f{z)f{z~^). It is 
customary (see [5], for example) to measure the smallness of the norm 
of a polynomial / by its merit factor F(f), defined by 


Fif) = 


4 ’ 
2 


provided that the denominator is nonzero. Note that, if / is a Littlewood 
polynomial of degree n — 1, then ||/||2 = ^/n and so a large merit factor 
means that the norm is small. 
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We note that Golay’s original equivalent definition m of the merit factor 
involves the aperiodic autocorrelations (which are precisely the coefficients 
of f{z)f{z~^)) of the sequence formed by the coefficients of /. 

Besides continuous progress on the merit factor problem in the last fifty 
years (see US], [IS], IS] for surveys and m for a brief review of more recent 
work), modulo generalisations and variations, only three nontrivial families 
of Littlewood polynomials are known, for which we can compute the asymp¬ 
totic merit factor. These are: Rudin-Shapiro polynomials and polynomials 
whose coefficients are derived either from multiplicative or additive charac¬ 
ters of finite fields. As shown by Littlewood [28], Rudin-Shapiro polynomials 
are constructed recursively in such a way that their merit factor satisfies a 
simple recurrence, which gives an asymptotic value of 3. The largest asymp¬ 
totic merit factors that have been obtained from the other two families equal 
cubic algebraic numbers 6.342061... and 3.342065 ... , respectively [20], [19] 
(see Corollary 12.41 and Theorem 12.11 in this paper for precise statements). 

The latter polynomials are closely related to classical difference sets, 
namely Raley and Singer difference sets. Recall that a difference set with 
parameters (n, fc. A) is a /c-subset of a finite group G of order n such that 
the k{k — 1) nonzero differences of elements in D hit every nonzero element 
of G exactly A times (so that k(k — 1) = A(n — 1)). We are interested in the 
case that the group G is cyclic. In this case, we fix a generator 0 of G and 
associate with a subset D of G the Littlewood polynomial 

t-i 

( 1 ) frAz) = ^lDi0^^1zf 

j=0 

where r and t are integers with t > 0 and 

1 for y & D 
— 1 for y E G \ D. 

If n is the group order, then /o,n captures the information about D. We call 
this polynomial a characteristic polynomial of D (which is unique up to the 
choice of 0) and the polynomials fr^n shifted characteristic polynomials. 

The results of this paper are mainly motivated by the 1991 paper of 
Jensen, Jensen, and Hpholdt [21], in which the authors asked for the merit 
factor of polynomials derived from families of difference sets. It was shown 
in [21] that, among the known families of difference sets, only those with 
Hadamard parameters, namely 



(4/1-1, 2h-l, h-1) 

for a positive integer h, can give a nonzero asymptotic merit factor for their 
shifted characteristic polynomials. As of 1991, five families of such difference 
sets were known m- 

(A) Raley difference sets, 

(B) Singer difference sets. 
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(C) Twin-prime difference sets, 

(D) Gordon-Mills-Welch difference sets, 

(E) Hall difference sets. 

While in the first three cases, the asymptotic merit factors of the shifted 
characteristic polynomials have been determined in m and [21] and those 
of the more general polynomials ([I|) in [20] and [l9], the last two cases were 
left as open problems in |2T|. More specifically, the asymptotic merit factor 
of the polynomials derived from a subclass of the Gordon-Mills-Welch dif¬ 
ference sets is subject to a conjecture m Gonjecture 7.1]. In this paper, we 
prove this conjecture and solve the problems concerning Gordon-Mills-Welch 
and Hall difference sets posed in [2T] (see Theorem 12.11 and Gorollary 12.61 
respectively). In addition, we obtain the asymptotic merit factor of poly¬ 
nomials related to a construction of Sidelnikov [30] (see also m)- This 
explains numerical observations in m and proves in the affirmative m 
Gonjecture 7.2]. 

In fact, the result for Hall difference sets arises from a much more general 
theorem concerning polynomials derived from cyclotomy (see Theorem 12.3|) . 
This result considers polynomials constructed from subsets of Fp obtained by 
joining m/2 of the m cyclotomic classes of (even) order m, where m satisfies 
p = 1 (mod m). The cases m G {2,4,6} are examined in detail. For m = 2, 
we obtain the asymptotic merit factor of polynomials arising from Paley 
difference sets (see Gorollarv l2.4p . which is the main result of [2D|. For m = 4, 
we obtain the asymptotic merit factor of polynomials arising from Ding- 
Helleseth-Lam almost difference sets m (see Gorollary 1^ . For m = 6, 
we obtain, among other things, the asymptotic merit factor of polynomials 
arising from Hall difference sets (see Gorollary 12.6p . 

Some comments on our result for Gordon-Mills-Welch difference sets fol¬ 
low. In the cyclic case, such sets have paramaters 

( 2 "^- 1 , 2 ”^-^- 1 , 2 ™- 2 - 1 ), 

which are typically called Singer parameters. The Gordon-Mills-Welch con¬ 
struction produces difference sets in a cyclic group G of order 2™ — 1 from 
difference sets with Singer parameters in a subgroup of G. Hence this con¬ 
struction is very general and can in particular be iterated. Our result on 
Gordon-Mills-Welch difference sets (Theorem 12.ip requires no knowledge 
about the smaller difference sets that are used as building blocks. Thus 
Singer, Paley, or Hall difference sets (in groups whose order is a Mersenne 
number) can be used as building blocks. In addition, since 1991, further 
families of difference sets in cyclic groups with Singer parameters have been 
found: 

(F) Maschietti difference sets [29], 

(G) Dillon-Dobbertin difference sets [9], 

(H) No-Ghung-Yun difference sets [9]. 
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Our results include the cases when these difference sets are used as building 
blocks in the Gordon-Mills-Welch construction. However we have not been 
able to determine the asymptotic merit factors of the polynomials associated 
with these difference sets themselves. We conjecture that they have the same 
behaviour as those of Singer and Gordon-Mills-Welch difference sets, given 
in Theorem O 


2. Results 


To state our results, we require the function : M x M"*" —>• M, defined 
for real ly by 


1 


^u{R, T) 


2(l + v)T / 

= 1-^-h 4 I 0,1 — 

mgN 


+v max ( 0,1 — 


mgZ 


1 + 


2R — m 


where N is the set of positive integers. This function satisfies (piy{R,T) = 
Pv{R + ^,T) on its entire domain. It will be useful to know the global 
maximum of for certain values of u. The function pi was maximised 
in m Gorollary 3.2]. Using the same approach, we find that, for all u E 
[ 0 , 1 ], the global maximum of pi,{R,T) exists and equals the largest root of 


- 2i/3 - - 50u -h 112)X^ + {12u^ + - ISu - 528)X^ 

+ (24i/ 2 -h 282u -h 528)X - 6u - 48. 

The global maximum is unique for R E [0, and is attained when T is the 
middle root of 

(2u -F 2)X^ - {<dv + 2A)X + 3v + 2A 

and R = 3/4 — T/2. 

We begin with stating our results for Gordon-Mills-Welch difference sets 
m whose ambient group is F*, where (7 > 2 is a power of twc0. Let be a 
proper subfield of Fg and let A contain all elements a E Fg with Trg^s(a) = 1, 
where Tr„^^ is the trace from F^ to F^. Let R be a difference set in F* 
with |R| = s/2 (so that, for s > 2, the complement of B in F* has Singer 
parameters). We also allow s = 2, so that R is a trivial difference set. A set 
of the form 


( 2 ) {ab : a ^ A,b ^ R} 

is a Gordon-Mills-Welch difference set in F* (whose complement has Singer 
parameters). They generalise the Singer difference sets, which arise for 
s = 2. We have the following result for the asymptotic merit factor of 
polynomials obtained by Gordon-Mills-Welch difference sets. 

^We note that [14] defines more general difference sets, which are also called Gordon- 
Mills-Welch difference sets. However, the sets considered in this paper are the only ones 
with Hadamard parameters. 
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Theorem 2.1. Let q > 2 be a power of two and let f be a characteristic 
polynomial of a Gordon-Mills-Welch difference set in F*. Let T > 0 be real. 
If t/d ^ then F{fr^t) </^o(0, T) as q ^ oo. 

In the particular case of Singer difference sets, Theoreni l2.1l reduces to [T9l 
Theorem 2.2 (i)]. The case that the Gordon-Mills-Welch difference sets in 
Theorem 12.11 are of the form ([2|) when i? is a Singer difference set proves |19l 
Conjecture 7. 10 . 

Next we consider subsets of F* for an odd prime power q, which are related 
to a construction of Sidelnikov [30]. We call a set of the form 

(3) {x G F* : X -|- 1 is zero or a square in F*} 

a Sidelnikov set in F*. Such a set gives rise to a so-called almost difference 
set [U Theorem 4]. We have the following result for the asymptotic merit 
factor of the associated polynomials, proving [T9l Conjecture 7.2]. 

Theorem 2.2. Let q be an odd prime power and let f be a characteristic 
polynomial of a Sidelnikov set in F*. Let T > 0 be real. Ift/q T, then 
F{fr,t) <^o(0, T) as q^ oo. 

The maximum asymptotic merit factor that can be obtained in Theo¬ 
rems [2]T] and [22] is 3.342065 ... , the largest root of 

7X^ - 33X2 ^ _ 3 

Next we construct Littlewood polynomials using cyclotomy. Let m be a 
positive integer and let p be a prime satisfying p = 1 (mod m). Let a; be a 
fixed primitive element in Fp. Let Cq be the set of m-th powers in F* and 
write Cs = oj^Cq for s G Z. The sets Cq, Ci, ..., Cm-i partition F* and are 
called the cyclotomic classes of Fp of order m. 

We construct subsets D of the additive group Fp by joining some of these 
classes. This method provides a rich source of difference sets (see [23] for a 
survey). We may take 1 as a generator for Fp, in which case the polynomials 
associated with D are 

t-i 

frA^) = + 

3=0 

and a characteristic polynomial is /o,p (this is no loss of generality; if the 
generator is v, then replace D by v~^D). It follows from [211 Theorem 2.1] 
that the shifted characteristic polynomials associated with D have a nonzero 
asymptotic merit factor only if \D\/p approaches 1/2 as p —>• oo, thus m 
must be even and D must be a union of m/2 cyclotomic classes. Two 
families of difference sets arise in this way, namely the Paley difference sets 

^Conjecture 7.1 of [19] also involves “negaperiodic” and “periodic” extensions of the 
polynomials associated with Gordon-Mills-Welch difference sets. The corresponding as¬ 
sertions can be obtained as direct consequences of Proposition 15.31 and [19[ Theorem 4.2], 
but are omitted here for the sake of simplicity. 
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for m = 2 and the Hall difference sets for m = 6 |22[ Theorem 2.2]. If Z) is 
a union of m/2 cyclotomic classes of order m, then \D\ = (p — l)/2, so if I? 
is a difference set, then it must have Hadamard parameters. Equivalently, 
\{D + u)r\D\ = (p—3)/4 for every u E F*. Our next theorem applies not only 
to such difference sets, but requires this condition to hold asymptotically (in 
a precise sense). 


Theorem 2.3. Let m be an even positive integer and let S be an m/2- 
element subset of {0,1,... ,m — 1}. Let p take values in an infinite set of 
primes satisfying p = 1 (mod m). Let D be the union of the m/2 cyclotomic 
classes Cg with s G S of ¥p of order m and suppose that, as p ^ oo, 

(4) S^E(l(« + »)no|-0'-o. 

^ neF; ^ ^ 

Let f be a characteristic polynomial of D and let R and T > 0 be real. If 
r jp R and t/p —>■ T, then the following hold as p ^ oo: 

(i) If^ is even for every p, then F{fr,t) 

(n) is odd for every p, thenF{fr,t) py{R,T), where v = (^-1)^ 

and 

N = |{(s,s') gSx S : s - s' = m/2}\. 


Several remarks on Theorem 12.31 follow. It is readily verified that v in 
Theorem 12.31 satisfies v E [0,1]. The condition (j3|) is essentially necessary 
since 


1 

'W) 



Y, i\{D + u)nD 



2 


This can be deduced from the proof of Theorem 12.31 and the inequality 


4 
4 ^ 


1 


a 5 E + y, 


fcGFp 


which can be obtained from [171 (2.3)] with an extra step involving the 
Cauchy-Schwarz inequality. In fact, this is a refinement of the Marcinkiewicz- 
Zygmund inequality |32l Chapter X, Theorem 7.5] for the L‘^ norm. 

The condition Q can be checked using the cyclotomic numbers of or¬ 
der m, which are the m^ numbers 


\{Ci + i)nCj\ 

for 0 < i,j < m. These numbers are known explicitly for all even m < 20 
and for m = 24 (see [H p. 152] for a list of references). Also note that 
the conclusion of Theorem O remains unchanged if we replace 5 by /i -|- 5 
reduced modulo m for an integer h (which changes D to io^D). 

We now consider in detail the cases m E {2,4,6} of Theorem 12.31 If 
m = 2, then D consists of either the squares or the nonsquares of F*. In 
both cases, H is a Paley difference set for p = 3 (mod 4). As remarked 
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above, we can assume without loss of generality that D is the set of squares 
in F*. Then we have (see [H Theorem 2.2.2], for example) 


‘i\{D + u)f^D\ = 


f P~ 1 

I p — 4 — (— 1 )^“ 


for u a square in F* 

for u a nonsquare in F*. 

Noting that p = 1 for m = 2, we obtain the following corollary, which is 
essentially the main result of [20j (see also m Theorem 2.1]). 


[p-2 + (-l)'^ 


Corollary 2.4. Let p take values in an infinite set of odd primes, let D 
he either the set of squares or the set of nonsquares of F* and let f be a 
characteristic polynomial of D. Let R and T > 0 be real. If r/p —)• R and 
t/p —)• T, then F{fr^t) <^i(-R) T) as p ^ oo. 


We now look at the case m = 4. Here, we only need to consider two cases 
for joining two cyclotomic classes of order four, namely Cq U C2 and Cq U Ci . 
The first case brings us back to m = 2. When p is of the form + 4 for 
X G Z and (p — 1)/4 is odd, the second case gives rise to the Ding-Helleseth- 
Lam almost difference sets nni Theorem 4]. By inspecting the cyclotomic 
numbers of order four (see Section ED, we obtain the following. 

Corollary 2.5. Letp take values in an infinite set of primes of the form x'^ + 
4y^ for x,y G Z such that y'^flogpfi/p —)• 0 as p ^ 00 . Let D be the union 
of two cyclotomic classes of Fp of order four and let f be a characteristic 
polynomial of D. Let R and T > 0 be real. If r/p —>• R and t/p T, then 
F{fr,t) ^ ^i{RiT) asp ^ 00 . 

Recall from elementary number theory that primes of the form x^+4y^ for 
x,y G h are exactly the primes that are congruent to 1 modulo 4. It is also 
known [7] that there are infinitely many primes satisfying the hypothesis of 
the corollary. 

The case m = 6 is the first situation, where different limiting functions 
occur. In this case, there are four different sets D to consider, namely 

(5) Cq U C2 U C 4 , Cq U Cl U C 2 , Cq U Ci U C 3 , Cq U Ci U C 4 . 

Again, the first set brings us back to m = 2. When p is of the form x^ + 
27 for X G Z and (p — l )/6 is odd, then either the third or the fourth 
set in ([5]) gives rise to Hall difference sets [22] (the choice depends on the 
primitive element u). We shall see that Theorem 12.31 gives two possible 
limiting functions for the sixth cyclotomic classes, which is our motivation 
for the following definition. Let D be a union of three cyclotomic classes of 
order six. If there is a 7 G F* such that •jD equals one of the first two sets 
in dSj), then we say that D is of Paley type. Otherwise, we say that D is of 
Hall type. 


Corollary 2.6. Let p take values in an infinite set of primes of the form 
x^ + 27y‘^ for x,y G Z such that y^(logp)^/p —>• 0 as p —)• 00 . Let D 
be the union of three cyclotomic classes of Fp of order six and let f be a 
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characteristic polynomial of D. Let R and T > 0 be real. If r/p —)• R and 
t/p ^ T, then the following hold as p —)• oo; 

(i) If, for each p, D is of Raley type or is even, then F{fr^t) 
(pi{R, T). 

(ii) If, for each p, D is of Hall type and is odd, then F{fr^t) 

t). 

It is known that primes of the form + 27y^ for x,y & Z are exactly 
the primes p for which p = 1 (mod 6) and 2 is a cube modulo p [U Corol¬ 
lary 2.6.4], Again, it is also known [7] that there are infinitely many primes 
satisfying the hypothesis of the corollary. 

The largest asymptotic merit factor that can be obtained in Corollar¬ 
ies [231 [231 and 12.61 (ii is 6.342061... , the largest root of 

29X^ - 2A9X‘^ + A17X - 27, 

which equals the best known asymptotic value for Littlewood polynomials. 
The largest asymptotic merit factor that can be obtained in Corollarv l2.6h iii 
is 3.518994 ... , the largest root of 

349061^3 - 1737153A2 -7 1835865A - 159651. 

It is also of interest to look at the case T = 1 in our results, which concerns 
just the shifted characteristic polynomials, as considered in |17j and [H] for 
Paley and Singer difference sets, respectively. Since 

the global maximum of g^iR, 1) equals 6/(2 — v). Hence, for 3 = 1, Theo¬ 
rems 12.11 and 12.21 give an asymptotic merit factor of 3, Corollaries 12.4112.51 
and l2.6l (i) give a maximum asymptotic merit factor of 6 and Corollarv l2.6l (ii) 
gives a maximum asymptotic merit factor of 54/17. 

We note that there are also “negaperiodic” and “periodic” versions of 
Theorem EH Theorem 12.31 and its corollaries, as considered in [19] (but 
not of Theorem [231 since in this case the characteristic polynomials have 
odd degree). These follow directly from our results and a generalisation of 
Theorem 13.II in the vein of parts (ii) and (iii) of Theorems 4.1 and 4.2 in [19j . 
We omit their statements for the sake of simplicity. 

We shall prove Theorems 12.11 and 12.21 in Sections [5] and [6] respectively. 
Theorem 12.31 and Corollaries 12.51 and 12.61 will be proved in Section [Tj 

3. Asymptotic merit factor calculation 

Let f{z) = Yl'jZo be a Littlewood polynomial of degree ra — 1 and 
let r and t be integers with t >0. Define the polynomial 

t-i 

fr,t{z) — ^ ^ aj-\-rZ^, 

i=o 
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where we extend the definition of aj so that aj-^-n = aj for all j E Z. Write 
ek = Prom |19j it is known that F{fr,t) depends only on the function 

Lf : {'L/nLY defined by 


Lf{a,b,c) = ^ ^ f{ek)f{ek+a)f{ek+b)f{ek+c)- 

Define the functions In, Jn '■ C^InZ)^ —>■ Z by 

1 if (c = a and 6 = 0 ) or (6 = a and c = 0 ), 


and 


In{a,b,c) = 


Jnia,b,c) = 


0 otherwise 


1 if a = 0 and 6 = c 7 ^ 0 , 
0 otherwise 


and, for even n, the function Kn ■ {Zfnh)^ —>■ Z by 


Kn{a,b,c) = 


1 if a = n /2 and b = c + n /2 and be 7 ^ 0 , 
0 otherwise. 


In order to prove Theorems 12.1112.21 and 12.31 we shall show that the corre¬ 
sponding function T/ is well approximated by either + pj„ for an appro¬ 
priate real p or by In + Kn and then apply one of the following two theorems. 
Our first theorem is a slight generalisation of Theorems 4.1 (i) and 4.2 (i) 
of |19] . which arise by setting p = 1 and v = 0, respectively. This theorem 
can be proved by applying straightforward modifications to the proof of [T9l 
Theorem 4.1]. 

Theorem 3.1. Let v be a real number and let n take values in an infinite set 
of positive integers. For each n, let f be a Littlewood polynomial of degree 
n — 1 and suppose that, as n ^ 00 , 

(logn)^ max \Lf{a,b,c) — iIn(a,h,c)+uJn{a,b,c))\^Q. 
a,b,ceZ/nZ ' ' 

Let R and T > 0 be real. Ifr/n R and t/n ^ T, then F{fr^t) T) 

as n —)• 00. 

There is a similar generalisation of parts (ii) and (iii) of Theorems 4.1 
and 4.2 in |19] . which we do not consider in this paper. 

Our second theorem is a more subtle modification of Theorem 4.1 (i) 
in m- We include a proof that highlights the required modifications of the 
proof of m Theorem 4.1 (i)]. 

Theorem 3.2. Let n take values in an infinite set of even positive integers. 
For each n, let f be a Littlewood polynomial of degree n — 1 and suppose 
that, as n ^ 00 , 

( 6 ) (logn)^ max \Lf{a,b,c)-{In{a,b,c)+Kn{a,b,c))\^0. 
a.^h^c^'Lln'L 
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Let T > 0 be real. Ift/n T, then F{fr^t) ¥^0(0,7") as n ^ oo. 


Proof. The first part of the proof is identical to that of [19^ Theorem 4.1 (i)], 
giving 


(7) 


1 

T7T 


0<jlJ2,i3J4<i a,b,c£Z/nZ 
Jl+12 =13+14 


where €k = Write 


(8) Lf{a, b, c) = In{a, b, c) + Kn{a, h, c) + Mn(a, 6, c), 

where Mn{a,b,c) is an error term, which can be controlled using ([6]). Con¬ 
sider three cases for the tuple (a, b, c) € Z/nZ: (1) c = a and b = 0, (2) a = b 
and c = 0, and (3) b = c + n/2 and a = n/2. Then In{a,, b, c) + Kn{a, b, c) 
equals 1 if at least one of these conditions is satisfied and Inia,b,c) + 
Kn{a,b,c) equals 0 otherwise. There are exactly three tuples {a,b,c) that 
satisfy more than one of these conditions, namely (0,0, 0), (n/2, n/2,0 ), and 
(n/2, 0, n/2). 

We now substitute ([8]) into ([7]) and break the sum involving In{a, b, c) + 
Kn{a,b,c) into six parts: three sums corresponding to the three cases and 
three sums to correct for the double counting of (0,0,0), (n/2, n/2, 0), and 
(n/2, 0, n/2). Noting that the sums arising in cases (1) and (2) have the 
same value, as have the sums arising for the compensation of the double 
count of (n/2, n/2, 0) and (n/2, 0, n/2), we obtain 

——- = —1 + A + B + C — Di — D2 — D3 + E, 

7 Ur,t) 

where 

= « = i E E 4--+ 

0<jl,i2,j3,i4<i b&Z/nZ 
11+12=13+14 

^ = E +1)”^” E 

0<ii)i2,i3,i4<i cez/nZ 

11+12=13+14 

1 

0<jl,i2,j3,i4<4 

11+12=13+14 

0<il,j2,i3,l4<I 

11+12=13+14 

^ = ^ ^n{a,b,c)eLa+b+c Y 

a,b,c^Z/nL 0<jl,j2,j3j4,<t 

11+12=13+14 




MERIT FACTORS OF POLYNOMIALS DERIVED FROM DIFFERENCE SETS 11 


As in the proof of m Theorem 4.2], we have —1 + A + B — Di + E —)• 
l/(/?o(0, r) if t/n ^ T. Hence it remains to show that C — D 2 — D 3 ^ 0 if 
t/n —)• T. 

Since there are contributions to the first sum in C only when jh + jh = 
mn — 2r for some m G Z, we obtain 

c = E (-It 

rriEZ \ o<j,mn—2r—j<t 

Therefore we have jCj < l/{tn) and so C —)• 0 if t/n —>■ T. By writing 
= ji + m for some m G Z we find that 

e (-C 

Hence |T>2| < f/{tn) and therefore D 2 +D 3 ^ 0 if t/n ^ T. This completes 
the proof. □ 




4. Some background on Gauss and Jacobi sums 


Let X be a multiplicative character of Fg. Throughout this paper, we use 
the common convention 


X(0) 


0 if X is nontrivial 
1 if X is trivial. 


We define the canonical Gauss sum of x to be 


(9) G(x)= 

y6F* 

where p is the characteristic of ¥q and Tr^^p is the trace from ¥q to Fp. Below 
we summarise some basic facts about such Gauss sums (see [26l Chapter 5] 
or [H Chapter 1], for example). 


Lemma 4.1. Let x o multiplicative character of¥q. Then the following 
hold. 

(i) G{x) = — 1 if X I'S trivial. 

(a) |G(x)| = ^/q if X is nontrivial. 

(Hi) G{x)G{x) = X(-1)?- 

We also require the following deep result due to Katz [25 pp. 161-162]. 


Lemma 4.2. Let ai,..., o;,.,/3i ,...,he multiplicative characters of¥q 
such that do not arise by permuting /3i,..., /dg. Then 


^G(xai)-- - G{xar)G{xl3i) ■ ■ ■ G{xl3s) 


< max(r, s) 


X 

where the sum runs over all multiplicative characters x of¥q. 
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Now let iIj and x be multiplicative characters of The Jacobi sum 
corresponding to and x is defined to be 

x) = X] ^(2^)x(i - y)- 

y&q 

Below we summarise some basic facts about Jacobi sums (see |26l Chapter 5] 
or [H Chapter 2], for example). 

Lemma 4.3. Let and x be multiplicative characters of Fg. Then the 
following hold. 

(i) J{'tf,x) = 0 f/ exaetly one of if or x is trivial. 

(a) |J('0,x)| = 1 f/iA o.nd X nontrivial, but f^x is trivial. 

(in) \ J{^jJ,x)\ = y/g if all off), X; and i/’X o.re nontrivial. 

(iv) J{f),x)g = G{f))G{x)G{f)x) iff’ and x are nontrivial. 

(v) J{f),x)J{'f’iX'f’) = iff) and x are nontrivial. 


5. GORDON-MiLLS-WeLCH DIFFERENCE SETS 


In this section we prove Theorem 12.II If Z) is a subset of a finite abelian 
group G and x is a character of G, we write 

x{D) = Y,x{d). 

d&D 

The following lemma is a standard (and easily verified). 


Lemma 5.1. A k-subset D of a finite abelian group G of order n is a 
difference set if and only if 

n — 1 

for all nontrivial characters x of G. 


The following lemma gives the character values of Gordon-Mills-Welch 
difference sets and in particular gives an alternative proof of the main result 
of [H] (although, for simplicity, we restrict q to be even). 


Lemma 5.2. Let q > 2 be a power of two and let F^ be a subfield of¥q. 
Let A contain all elements a E Fg with Trg^s(a) = 1, let B be a subset o/F*, 
and write D = {ab : a £ A,b G B}. Let x be a nontrivial eharacter o/F* 
and let x* be its restrietion to F*. Then 

(X*{B)^ 


X{D) = 


Gix 

X*{B) 


G{x) for X* nontrivial 


G{x) for X* trivial. 


In particular, if B is a difference set in F* and \B\ = s/2, then D is a 
differenee set with parameters {q — l,g/2,g/4). 
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Proof. We have 




a&q b&B 
Trq,s(a)=l 


where 


Eix)= E 


aeF„ 


Trq,s(a)=l 

is an Eisenstein sum. It is known [H pp. 391/400] that 

jG{x)/G{x*) for X* nontrivial 
[—G(x)/'S for X* trivial, 


E{X) = 


which proves the first statement of the lemma. The second statement follows 
from Lemmas EDandlUl □ 

We now prove Theorem [2T] by combining Theorem 13.II with the following 
result. 


Proposition 5.3. Let q > 2 be a power of two and let f be a characteristic 
polynomial of a Gordon-Mills-Welch difference set in F*. Then 

\Lf{a,b,c) - Iq-i{a,b,c)\ < _ ^^3 

for all a,b,c £ Z/(q — 1)Z. 

Proof. By definition, there exists a proper subfield F* of Fg such that the 
underlying Gordon-Mills-Welch difference set is 

D = {ah : a £ A,b £ B}, 

where A contains all elements a E Fg with Trq^s(a) = 1 and i? is a difference 
set in F* with |i?| = s/2. Let 0 be a generator for F* such that 

q-2 

f{z) = J2^DienzE 

j=0 

Let ^ be the multiplicative character of Fg given by f,{9) = _ it is 

readily verified that 


fie 


27Tik/{q—l)'^ _ 


1 for /c = 0 

2ff{D) for /c ^ 0 
It then follows from Lemmas 15.21 and 0(1) that 

/(e2-'"/(''-i)) = GuG{e), 


(mod n) 
(mod n). 
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where Ck has unit magnitude for all k and depends only on k modulo s — 1 . 
Therefore 

(10) Lf{a, b, c) = Y. G{x)G{xnG{xe)G{x^<^) C^(a, b, c), 


where the sum is over all multiplicative characters x of Fg and C^{a,b,c) 
has unit magnitude. Using Lemma l4.ll we obtain 

1 + for a = 6 = c = 0 

1 - (q\y 2 { 0 )«} = {b, c} and a^O, 

which proves the desired result in the case that Iq-i{a, b, c) = 1 . 

Now assume that {0,a} 7 ^ {b,c}, so that Iq-i{a,b,c) = 0. We need to 
show that 


Lf{a,b, c) 


( 11 ) 


|L/(a, 6 ,c)l < 


2(?5/2 

(g-l)3- 


Let H be the subgroup of index s — 1 of the character group of F* and 
note that H is not the trivial group since, by assumption, s < q. Then 
Cy'{a, b, c) is constant when y ranges over a coset of H. Since C^{a, b, c) has 
unit magnitude, we find from (11011 and the triangle inequality that 


( 12 ) 


|L/(a, 6 ,c)| < 


s — 1 


max 

0 


G{xmx^nG{x(i>e)G{x(t>^-) 

X&H 


where the maximum is over all multiplicative characters ^ of Fg. By the 
definition ([9]) of a Gauss sum over Fg, the inner sum can be written as 


E 


(^_-[yj^’i:q,2(w+x+y+z) 


w,x,y,z&* 



For each w, x, y, 2 ; G F*, we have 

s —1 fwx\ 1 fwx\ 

q-1 ^ \yzJ 9 - 1 ^ 

where the sum on the right-hand side is over all multiplicative characters 
of Fq, since both sides equal either 0 or 1 depending on whether wx = yz or 
not. Therefore, we can rewrite the inner sum of (I12p as 

^ G{xcj>)G{xcPnG{x<pe)G{xm, 

s — 1 

X 

where y now runs over all multiplicative characters of ¥q. The magnitude 
of this expression is at most by Lemma Substitute into (fl^l) to 

conclude that m holds, as required. □ 
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6. SiDELNIKOV SETS 


In this section we prove Theorem 12.21 by combining Theorem 13.21 with the 
foiiowing resuit. 


Proposition 6.1. Let q be an odd prime power and let f be a characteristic 
polynomial of a Sidelnikov set in F*. Then 


\Lf{a,b,c) - (/q_i(a,5,c) + Kg_i{a,b,c))\ < 


23g5/2 
(g- 1)3 


for all a,b,c £ ^Lj{q — 1)Z. 


Proof. Let r] be the quadratic character of Fg. By the definition of a Sidei- 
nikov set ([3]) , there exists a generator 9 of F* such that 

f{z) = ^ r]{9^ + l)z^, 

j=o 

where, as usuai, r/(0) = 0. Let ^ be the muitipiicative character of Fg given 
by f,{9) = , Then we have, for aii A: ^ 0 (mod O' — 1), 

q-2 

= (- 1 )^ + ^ r]{e^ + 

j=0 

= 2»,(!, + i)e‘(!,) 

= (-1)^(1+J(l?,e^)). 


On the other hand we have /(I) = 1 — r/(l) = 0. Therefore 

f _i'\a+6+c _ _ 

(13) Lf{a,b,c) = _ ^T(??,x)J(i?,xDJ(T?,xg^)J(r/,X^‘^) + A, 

w ) ^ 

where the sum is over aii muitipiicative characters y of F^ and |A| < 
15g3/2/(g-l)2^ using Lemma [4.31 If one of b and c equals a and the other is 
zero, then by Lemma [4. 31 the sum in (1131) is between {q — 5)g^ and {q — 2)q‘^. 
If a = {q — l)/2 and b = c + {q — 1 )/ 2 , then ff" = r] and = ffr] and by 
Lemma Sis] (in particular (v)) the sum (fT^ is again at least {q — b)q^ and 
at most {q — 2 )q^. Since 

(g - 5)g^ ^ _ 2g^ + 3g - 1 

(g-l)3 (g-1)^ 

this establishes the cases in which either /q_i(a, b, c) or iLq_i(a, b, c) equals 1. 

Now assume that {a,b,c) is such that /q_i(a, 6, c) and Kg-i{a,b,c) are 
both zero. Equivalently, the multisets 

(14) {e,e,ev,ev} and {v,eT^\e} 
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are distinct. Use Lemmas 14.31 and O to see that the sum in (fT3]i equals 
(15) 4 E G{x)G{xnG{xve)G{xve)G{xv)G{xv^-)G{xe)G{x^<^) 

« X 

plus an error term of magnitude at most where the sum is over all 

multiplicative characters x of Fg. Since the multisets (fT4)l are distinct, we 
can apply Lemma 14.21 to see that (jl5jl is at most 4g^/^. This shows that 

\Lf{a,b,c)\ < 

as required. □ 


7. CYCLOTOMIC CONSTRUCTIONS 

In this section we prove Theorem 12.31 and Corollaries 12.51 and 12.61 We 
shall use the following notation. Let m be an even positive integer and let p 
be a prime satisfying p = 1 (mod m). Let a; be a primitive element of Fp 
and let Cq, Ci,..., Cm-i be the cyclotomic classes of Fp of order m with 
respect to uj. Let S be an m/2-element subset of {0,1 ,..., m — 1} and let 
D be the union of the m/2 cyclotomic classes Cg with s £ S. Taking 1 as a 
generator for the additive group of Fp, a characteristic polynomial of D is 

p-i 

( 16 ) f{z) = '^lD{j)zK 

j=0 

The following lemma gives the evaluations of / at p-th roots of unity. 

Lemma 7.1. Assume the notation as above and let x be a multiplicative 
character of ¥p of order m. Then 

r, 

= - E Gixn X^ik) E - 1- 

^ j=i seS 

Proof. Since /(I) = \D\ — |Fp\Zl| = —1, the result holds for A: = 0 (mod p), 
so assume that k ^ 0 (mod p). By definition we have 



g27rifcy/p _ 

g27riA:y/p 

y&D 

pgFp\D 

2 ^2TTikylp 


y&D 

y&v 

2 g27r*fcy/p 


y&D 



= 2EE ^27viky/p^ 
sG.S yG.Cs 
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Writing h = the inner sum can be written as 


h-l 


y^Cs j=0 




-(e 

\y^^P 


^2Tvik Ip 


- 1 


Since YII=o^ X^iu) equals m if y is an m-th power and equals zero otherwise, 
we have, for each a E F*, 

m —1 

yy g27r*ap"*/p _ ^2may/p (y) 


yeFp 


i=o 


y&p 
m—1 

= E E 

j=o j/eFp 

For y = 0, the inner sum equals zero, so we can let the outer sum start with 
j = 1. Then all involved multiplicative characters are nontrivial and we can 
restrict the summation range of the inner sum to F*. Therefore 

m—1 




y&p i=i 

which gives the desired result. □ 

Our next result estimates Lj for / given in ([TH]) at all points, but ( 0 , 0 , 0 ). 
Proposition 7.2. With the notation as above, we have 
\Lf{a, b, c) — {Ip{a, b, c) + nJpia, b, c))| < 18(m — 
for all a,b,c £ 'Lj'pL with (a, b, c) ^ (0,0, 0), where 

' 1 


u = 


for -— even 

m 


(— — 1)^ for 2-T Qdd 

- V m, / J rr). 


and 


= |{(s, s') E S' X S' : s — s' = m/2}|. 

Proof. Let x be a multiplicative character of Fp of order m and write 

K{x^) = — 


s&S 


From Lemma O we find that 


m—1 


/(e2""/^) = G{x^)K{x^)xHk) - 1. 


( 17 ) 
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Hence Lf{a,b,c) equals 


- m—1 

P . 1 

Jl J2 J3 J4 = l 

X + b)x’*{k + c) + A, 

fcgFp 

where |A| < 15(m — using that the magnitude of the sum on the 

right-hand side of (jl7p is at most (m — by Lemma l4.II First consider 

the case that 6 = 0 and c = a 7 ^ 0, so that Ip{a, 6 , c) = 1 and Jp{a, b, c) = 0. 
Then the inner sum in (|18p is 

{k + a). 

feeFp 

This sum either has magnitude at most yfp by the Weil bound (see [26l 
Theorem 5.41], for example) or equals p. Since a 7 ^ 0, the latter case occurs 
if and only if ji = (mod m) and j 2 = ji (mod m). Therefore Lf{a, 0, a) 
equals 

plus an error term of magnitude at most 16(m — Then we find 

from Lemma l4.ll and 

m—1 

Y,\Kix^)\" = i 

i=i 

that the desired result holds for 6 = 0 and c = a 7 ^ 0. The case c = 0 and 
6 = a 7 ^ 0 is completely analogous. 

Now assume that a = 0 and c = 6 7 ^ 0, so that Ip{a,b,c) = 0 and 
Jp{a, 6 , c) = 1. Then the inner sum in (fTSl) equals 

xn+h(k)x^^^^^{k + 6 ). 

fceFp 



As before, this sum either has magnitude at most ^/p or equals p, where the 
latter case occurs if and only if ji = —j 2 (mod m) and js = —ji (mod m). 
Hence Lf{0,b,b) equals 


(19) 




m—1 


YG{xnG{x^)K{x^)K{xk) 

i=i 


plus an error term of magnitude at most 16(m — l)^p ^ From Lemma [4.II 
we find that (fT^ equals 


m—1 


2 


E xA-l) \K{X)? 

3 = ^ 


' m—1 

E(-i) 

> i=i 


j(p-i) 


m ^ 

s€S 


2 
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A standard calculation then shows that this expression equals u. This proves 
the desired result in the case that a = 0 and c = 6 / 0. 

Now assume that 0, a, b, c do not form two pairs of equal elements. In this 
case, we invoke the Weil bound again to conclude that the inner sum in ()18jl 
is at most 3^/p in magnitude. Therefore we have by Lemma l4.II 

|L/(a,6,c)| < 18(m — 

which completes the proof. □ 

Proof of Theorem 12.31 Without loss of generality, we may choose 1 as a 
generator for the additive group of Fp and take CS]) as a characteristic 
polynomial of D (if the generator is v, then replace D by v~^D). 

We shall deduce Theorem 12.31 from Theorem 13.11 Proposition 17.21 takes 
care of all values of Lf(a, b, c) in the condition of Theorem 13.11 except when 
(a, b, c) = (0,0, 0). We shall show that our assumption (j4]) takes care of the 
latter case. Writing 

Ru= lDiy)tD{y + u), 

y&p 

a standard calculation gives 

uSFp 

and therefore, by Parseval’s identity, 

YrI. 

^ fcSFp tiSFp 

A counting argument shows that 

Ru = ^\{D + u) r\ D\ — {p — 2). 

Therefore, since 2\D\ = p — 1, we find that L/(0, 0,0) equals 

1 |/(e2.«/r)|‘ = 1 + ^ (4 |(D + „) n D| - (p - 2))1 

^ fcsFp ^ iiGFJ 

Now our assumption ([3|) together with Proposition 17.21 imply that the con¬ 
dition of Theorem 13.11 is satished, which proves Theorem 12.31 □ 

Next we show how to deduce Corollaries 12.51 and 12.61 from Theorem 12.31 
First consider Corollary 12.51 As explained in Section O we just need to 
consider the case that D = Cq U Ci. The cyclotomic numbers of order four 
have been already determined by Gauss and can be found, for example, 
in [U Theorem 2.4.1]. These numbers depend on the representation p = 
+ 4y^ and on the parity of {p — l)/4. They also depend on the choice 
of the primitive element in Fp used to define the cyclotomic classes, but 
this is encapsulated in the fact that y is only unique up to sign. Using the 
cyclotomic numbers of order four, we obtain the numbers |(i4 -|- u) C Zl|, 
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Table 1 . The numbers 4 |(T)+R)nL)| — (p— 2 ) for T> = CqUCi 
and primes p of the form p = . 


D 

even 

2^ odd 

U G Cq 

—3 + 2 y 

-1-2?/ 

U G C\ 

- 3 - 2 y 

-1 + 2?/ 

u£C2 

l + 2y 

-1-2?/ 

u £ C3 

l-2y 

-1 + 2?/ 


Table 2 . The numbers 4 |(T) + u) Cl D\ — {p — 2 ) for primes 
of the form + 27 y^ and (p — l)/6 odd. 


D 

Cq U Cl U C2 

Cq U Cl U C3 

Co u C2 u C3 

11 G 

-1 + 8?/ 

—3 + 2 y 

- 3 - 2 ?/ 

u£ Cl 

-1 

-1 

1 + 2?/ 

U£C2 

-1-8?/ 

l-2y 

-1 

U£C3 

-1 + 8?/ 

—3 + 2 y 

- 3 - 2 ?/ 

u G C4. 

-1 

-1 

1 + 2?/ 

u£C^ 

-1-8?/ 

1-2?/ 

-1 


shown in Tabled) For example, if u G Ci, then u ^ £ C 3 and \ {D + u) D D\ 
equals 

KCa +1) n C3I + |(C3 +1) n Co| + |(Co +1) n C73I + |(Co +1) n Co|. 

From the data in Table[T]we conclude that the assumption y^ilogp)^/p 0 
as p ^ 00 in Corollary 12.51 implies the condition (j3]) in Theorem 12.31 It is 
also readily verified that = 1, which proves Corollary 12.51 

Now consider Corollary 12.61 Then it suffices to consider the cases that D 
is one of the following sets 

Cq u C\ u c*2, c*o u Cl u C3, c*o u Cl u C4. 

The cyclotomic numbers of order six have been determined by Dickson [8] 
(see also [22] for (p — l)/6 odd and |3T] for (p — l)/6 even). These numbers 
depend on the representation of p as a sum of a square and three times 
a square (every prime congruent to 1 modulo 3 can be represented in this 
way) and on the cubic character of 2. Since p is of the form x^ + 27y^, we 
know ID Theorem 2.6.4] that 2 is a cube in ¥p. In this case, the numbers 
\{D + u) n D\ are given in Tables [2] and [3] (again y is only unique up to sign, 
corresponding to different primitive elements in ¥p). We again conclude 
that the assumption y^(logp)^/p —0 as p ^ 00 in Corollary 12.61 implies the 
condition 0 in Theorem 12.31 The proof of Corollary 12.61 is completed by 
checking that = 1 if D is of Paley type and = 1/9 if D is of Hall type. 
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Table 3 . The numbers 4 |(T) + u) Cl D\ — {p — 2 ) for primes 
of the form + 27y^ and {p — l)/6 even. 


D 

Co u Cl u C2 

Co U Cl U Cs 

Co u C2 u C3 

U G Cq 

-3 + 82/ 

-3 -1- 6 y 

—3 + 2 y 

u G C\ 

-3 

- 3 - 42 / 

1 - 22 / 

UGC2 

-3-82/ 

1 + 22 / 

-3 + 42 / 

ueCs 

1 + 82/ 

- 3 - 22 / 

-3 - 62/ 

u G C4. 

1 

1 + 42 / 

1 + 62/ 

UGC5 

1-82/ 

1-62/ 

1 - 42 / 
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